This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft File: HuXdRp9xw40T9Xxil5YiTMAg3BU.mft (raw, json) Hash identifier: xu5waCas9QnT0g1d1AxicjX0R9YAHs4pEP3zFEDOkMo= Subject key identifier: 42:62:5C:9E:FA:0B:47:12:1F:DD:2A:A5:6C:F4:18:D7:65:95:14:DD Authority key identifier: 1E:E5:DD:46:9F:71:C3:8D:13:F5:7C:62:97:96:22:4C:C0:20:DC:15 Certificate issuer: /CN=1ee5dd469f71c38d13f57c629796224cc020dc15 Certificate serial: 019AF208B4AE304464DACA7A9316727CB154 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HuXdRp9xw40T9Xxil5YiTMAg3BU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft Manifest number: 0B01 Signing time: Sat 06 Dec 2025 05:00:47 +0000 Manifest this update: Sat 06 Dec 2025 05:00:47 +0000 Manifest next update: Sun 07 Dec 2025 05:00:47 +0000 Files and hashes: 1: HuXdRp9xw40T9Xxil5YiTMAg3BU.crl (hash: MPuqTdNC4MvQGSaFqX+VC1yvz3dEMt+PEhrW40O/OTg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft rsync://rpki.ripe.net/repository/DEFAULT/HuXdRp9xw40T9Xxil5YiTMAg3BU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:b4:ae:30:44:64:da:ca:7a:93:16:72:7c:b1:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ee5dd469f71c38d13f57c629796224cc020dc15 Validity Not Before: Dec 6 05:00:47 2025 GMT Not After : Dec 7 05:00:47 2025 GMT Subject: CN=42625c9efa0b47121fdd2aa56cf418d7659514dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:01:85:80:fb:64:6c:94:ad:fc:f7:db:57:71: 48:f4:94:00:09:6d:b6:18:44:d1:1e:62:79:62:1e: e1:01:33:b0:db:c6:df:da:11:60:e3:84:0e:b5:25: b3:06:c0:53:5f:4a:52:1a:0f:6d:0c:67:e8:44:2e: fb:bd:88:df:b4:d9:93:92:47:3e:8b:9f:73:3b:1e: 10:09:ca:a1:b8:1f:9f:30:67:ea:f1:11:9d:d0:46: ba:95:4f:5c:2c:13:db:6f:15:a3:68:a2:43:b3:f5: 39:a2:ac:cd:6f:41:05:a1:be:8e:86:55:c9:50:d2: 4e:b5:2e:56:69:58:c0:77:1a:f7:7f:b4:64:42:c2: df:32:e8:25:4c:bd:22:4b:ef:65:7a:c7:a6:d2:99: 3d:d4:45:b6:d9:a3:23:0e:20:89:b6:20:4b:9b:49: 4d:a6:cb:9c:88:81:a6:ae:2c:0f:4c:39:66:b5:72: 42:f9:2f:bd:54:a8:9b:af:be:73:ca:76:cc:2d:fb: 56:c9:2c:06:a5:83:3d:d1:07:81:33:3d:f5:42:8d: 3c:eb:f1:ce:28:af:0d:21:9e:fc:e5:34:5b:53:2e: 3a:ca:08:0d:5e:dd:13:4c:0b:a0:6e:8e:17:2c:b5: 45:7a:21:be:ff:33:01:73:56:9f:7f:b2:0f:2d:c1: 29:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:62:5C:9E:FA:0B:47:12:1F:DD:2A:A5:6C:F4:18:D7:65:95:14:DD X509v3 Authority Key Identifier: keyid:1E:E5:DD:46:9F:71:C3:8D:13:F5:7C:62:97:96:22:4C:C0:20:DC:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HuXdRp9xw40T9Xxil5YiTMAg3BU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/26e898-612c-485f-b027-f4224306ba35/1/HuXdRp9xw40T9Xxil5YiTMAg3BU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:5a:7d:18:c9:7c:b9:72:03:21:37:3e:65:9e:4a:b0:0c:e3: 2b:99:24:7f:a0:fa:b7:3d:8c:e8:f7:d0:c9:00:d6:16:c4:2c: b9:31:d0:1d:30:6c:0e:b4:4b:e9:2f:48:f5:8d:02:0d:e0:80: bb:34:38:56:52:33:9c:59:5f:b3:5a:a5:a3:f4:3a:29:7f:c9: e0:ad:42:4f:b9:c2:00:03:b9:1d:c9:8b:f6:f5:a5:0f:79:5d: 99:b6:67:50:4d:b9:f7:09:43:8b:7b:18:c8:5c:eb:29:ff:bb: fb:34:4e:73:63:8d:09:f0:89:d4:9a:7c:d8:5d:be:a1:15:07: e1:9c:1c:57:36:8f:2f:99:e9:32:33:ff:59:3f:f4:75:54:cd: cb:49:53:0a:db:84:51:40:90:82:fb:34:3d:27:8b:d6:99:24: a3:22:1c:7b:84:aa:ea:5c:7c:fd:35:5c:05:5a:33:ef:99:db: 18:70:1a:61:d4:b3:d6:19:0e:d3:dc:ae:f2:ed:60:77:30:49: c6:49:b0:67:84:12:cc:c4:5c:3a:0c:40:aa:75:4a:69:62:c1: 7a:07:87:de:94:76:11:6c:f8:7c:1a:25:f0:d6:92:c2:c5:8b: 60:cc:a0:d8:00:16:07:0c:00:3a:20:d7:6d:49:7f:a0:0a:76: bf:07:5c:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCLSuMERk2sp6kxZyfLFUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlZTVkZDQ2OWY3MWMzOGQxM2Y1N2M2Mjk3OTYyMjRjYzAy MGRjMTUwHhcNMjUxMjA2MDUwMDQ3WhcNMjUxMjA3MDUwMDQ3WjAzMTEwLwYDVQQD Eyg0MjYyNWM5ZWZhMGI0NzEyMWZkZDJhYTU2Y2Y0MThkNzY1OTUxNGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8AGFgPtkbJSt/PfbV3FI9JQACW22 GETRHmJ5Yh7hATOw28bf2hFg44QOtSWzBsBTX0pSGg9tDGfoRC77vYjftNmTkkc+ i59zOx4QCcqhuB+fMGfq8RGd0Ea6lU9cLBPbbxWjaKJDs/U5oqzNb0EFob6OhlXJ UNJOtS5WaVjAdxr3f7RkQsLfMuglTL0iS+9lesem0pk91EW22aMjDiCJtiBLm0lN psuciIGmriwPTDlmtXJC+S+9VKibr75zynbMLftWySwGpYM90QeBMz31Qo086/HO KK8NIZ785TRbUy46yggNXt0TTAugbo4XLLVFeiG+/zMBc1aff7IPLcEpUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJiXJ76C0cSH90qpWz0GNdllRTdMB8GA1UdIwQY MBaAFB7l3UafccONE/V8YpeWIkzAINwVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHVYZFJwOXh3NDBUOVh4aWw1WWlUTUFnM0JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8yNmU4OTgtNjEyYy00ODVmLWIwMjct ZjQyMjQzMDZiYTM1LzEvSHVYZFJwOXh3NDBUOVh4aWw1WWlUTUFnM0JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8yNmU4OTgtNjEyYy00ODVmLWIwMjctZjQyMjQzMDZiYTM1 LzEvSHVYZFJwOXh3NDBUOVh4aWw1WWlUTUFnM0JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAFp9GMl8 uXIDITc+ZZ5KsAzjK5kkf6D6tz2M6PfQyQDWFsQsuTHQHTBsDrRL6S9I9Y0CDeCA uzQ4VlIznFlfs1qlo/Q6KX/J4K1CT7nCAAO5HcmL9vWlD3ldmbZnUE259wlDi3sY yFzrKf+7+zROc2ONCfCJ1Jp82F2+oRUH4ZwcVzaPL5npMjP/WT/0dVTNy0lTCtuE UUCQgvs0PSeL1pkkoyIce4Sq6lx8/TVcBVoz75nbGHAaYdSz1hkO09yu8u1gdzBJ xkmwZ4QSzMRcOgxAqnVKaWLBegeH3pR2EWz4fBol8NaSwsWLYMyg2AAWBwwAOiDX bUl/oAp2vwdcgA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:34:47 2025 by rpki-client